http://bugs.winehq.org/show_bug.cgi?id=15678
Summary: Application Noddy stops in copy protection Product: Wine Version: 1.1.6 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs@winehq.org ReportedBy: jan-winehq@hoogenraad.net
Attached the output of: WINEDEBUG=+relay wine Noddy_Klok.exe &> /tmp/output.txt
http://bugs.winehq.org/show_bug.cgi?id=15678
--- Comment #1 from Jan Hoogenraad jan-winehq@hoogenraad.net 2008-10-19 08:13:49 --- Created an attachment (id=16742) --> (http://bugs.winehq.org/attachment.cgi?id=16742) output of WINEDEBUG=+relay, bzip-ed
http://bugs.winehq.org/show_bug.cgi?id=15678
Austin English austinenglish@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |obfuscation
http://bugs.winehq.org/show_bug.cgi?id=15678
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |focht@gmx.net
--- Comment #2 from Anastasius Focht focht@gmx.net 2009-04-13 10:48:46 --- Hello,
judging from relay log it looks like StarForce copy protection (file names, registry keys, mutex/file mapping names).
--- snip --- 0033:Call KERNEL32.CreateFileW(003500bc L"D:\PROTECT.msg",80000000,00000001,00000000,00000003,00000080,00000000) ret=00416a1c 0033:Ret KERNEL32.CreateFileW() retval=ffffffff ret=00416a1c ... 0033:Call KERNEL32.CreateFileW(0035005c L"D:\PROTECT.exe",80000000,00000001,00000000,00000003,00000080,00000000) ret=00416a1c 0033:Ret KERNEL32.CreateFileW() retval=00000030 ret=00416a1c ... 0033:Call KERNEL32.CreateFileW(0035011c L"D:\PROTECT.gui",80000000,00000001,00000000,00000003,00000080,00000000) ret=00416a1c 0033:Ret KERNEL32.CreateFileW() retval=ffffffff ret=00416a1c ... 0033:Call KERNEL32.IsDebuggerPresent() ret=0041255b 0033:Ret KERNEL32.IsDebuggerPresent() retval=00000000 ret=0041255b ... 0033:Call KERNEL32.CreateFileMappingW(ffffffff,00000000,00000004,00000000,00002000,0095002c L"SFCP_GUI_015283ba-1e42-4cad-a691-fca508ab95ab_46_SharedMemory") ret=00416c4f 0033:Ret KERNEL32.CreateFileMappingW() retval=0000003c ret=00416c4f ... 002f:Call KERNEL32.CreateFileW(0059008c L"\\.\NTICE",80000000,00000000,00000000,00000003,00000000,00000000) ret=100110a8 002f:Ret KERNEL32.CreateFileW() retval=ffffffff ret=100110a8 002f:Call KERNEL32.InterlockedDecrement(00590080) ret=100011d8 002f:Ret KERNEL32.InterlockedDecrement() retval=00000000 ret=100011d8 002f:Call KERNEL32.CreateFileW(0059008c L"\\.\WINICE",80000000,00000000,00000000,00000003,00000000,00000000) ret=100110a8 002f:Ret KERNEL32.CreateFileW() retval=ffffffff ret=100110a8 002f:Call KERNEL32.InterlockedDecrement(00590080) ret=100011d8 002f:Ret KERNEL32.InterlockedDecrement() retval=00000000 ret=100011d8 002f:Call KERNEL32.CreateFileW(0059008c L"\\.\SICE",80000000,00000000,00000000,00000003,00000000,00000000) ret=100110a8 002f:Ret KERNEL32.CreateFileW() retval=ffffffff ret=100110a8 ... 0033:Call advapi32.RegOpenKeyExW(80000001,00432bb8 L"Software\Protection Technology\StarForce Runtime",00000000,00020019,0033f4b8) ret=004172c2 0033:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=004172c2 ... 002f:Call advapi32.RegOpenKeyExA(80000002,00745188 "SOFTWARE\Mindscape\Noddy en de Magische Klok\Keys",00000000,00020019,005f02d8) ret=101e970e 002f:Ret advapi32.RegOpenKeyExA() retval=00000000 ret=101e970e ... --- snip ---
Which makes this most likely a dupe of bug 3260
Regards
http://bugs.winehq.org/show_bug.cgi?id=15678
Austin English austinenglish@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution| |DUPLICATE
--- Comment #3 from Austin English austinenglish@gmail.com 2009-04-13 11:11:28 --- Dupe, per Anastasius.
*** This bug has been marked as a duplicate of bug 3260 ***
http://bugs.winehq.org/show_bug.cgi?id=15678
Austin English austinenglish@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #4 from Austin English austinenglish@gmail.com 2009-04-13 11:12:14 --- Closing.